PatchTheCVECVE-2026-35212: OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables
CVE-2026-35212 is a medium-severity flaw (CVSS 6.1) affecting opencti. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Versions prior to 7.260227.0 are vulnerable to XSS in the rendering of email-message observable body data. The content of the body field isn't appropriately sanitized when being rendered. Does require user interaction but could be exploited by someone sharing stix or any of the ingester. This could lead to CSRF and then large scale session theft.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.1 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.1% (top 96%) |
| CISA exploited list | No |
| Weakness | CWE-79 |
| Published | 2026-06-02 |
| Last modified | 2026-07-22 |
Last updated 2026-07-22 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-35212?
opencti: upgrade to 7.260227.0. Exact commands for each OS are on this page.
Is CVE-2026-35212 being exploited?
CVE-2026-35212 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-35212 affect?
CVE-2026-35212 affects opencti. Severity is medium (CVSS 6.1). OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Versions prior to 7.260227.0 are vulnerable to XSS in the rendering of email-message observable body data. The content of the body field is
How urgent is CVE-2026-35212?
Priority 22/100. No elevated risk signals yet.
Related CVEs
- CVE-2026-35211 MEDIUM 6.5 UPGRADE OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables
- CVE-2026-35210 HIGH 7.1 UPGRADE OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables
- CVE-2026-27960 CRITICAL 9.8 UPGRADE OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables
- CVE-2026-44730 HIGH 7.2 UPGRADE OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables